mtk_vpu Heap Buffer Overflow DoS

The vulnerability of the vpuloadfirmware function in the drivers/media/platform/mediatek/vpu/mtkvpu.c file of the MediaTek VPU video processor driver for Linux operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system...

Shell command Code Execution

The vulnerability of the Shell command shell in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Hyper-V Component Code Execution

The vulnerability of the Hyper-V component in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

vm2 Command-Line Interface Code Execution

The vulnerability of the command-line interface of the NPM package manager’s vm2 library is related to initialization errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

vm2 Code Execution

The vulnerability of the functions Uint8Array.prototype, TypedArray.prototype, and ArrayBuffer.prototype in the NPM package manager’s library is related to insufficient resource control with dynamic management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Windows Imaging Component Code Execution

The vulnerability of the Windows Imaging Component WIC in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Netlogon Service Code Execution

The vulnerability of the Netlogon service in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Graphics component Windows Code Execution

The vulnerability of the Graphics component in Windows operating systems is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created RTF format file...

libfreerdp H264 Buffer Overflow RCE

The vulnerability of the avc444ensurebuffer function in the libfreerdp/codec/h264.c file of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

MariaDB SQL Injection

The vulnerability of the mysqlrealescapestring function in the MariaDB database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute SQL injections remotely...

OpenSSL derive() function Data Compromise

The vulnerability of the derive function in the modules openssl/src/derive.rs and openssl/src/pkeyctx.rs of the OpenSSL library is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

OpenSSL unwrap_key() Heap Buffer Overflow DoS

The vulnerability of the unwrapkey function in the openssl/src/aes.rs module of the OpenSSL library is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...

Linux kernel XFRM/IPsec DoS

The vulnerability of the functions copytouseraead, copytouserealg, and copytouserstateextra in the net/xfrm/xfrmuser.c sub-module of the XFRM/IPsec subsystem in Linux operating systems is related to insufficient control over resources with dynamic management. Exploitation of this vulnerability...

Linux kernel TUN/TAP Buffer Overflow DoS

The vulnerability of the tungetuser and tunxdpone functions in the drivers/net/tun.c file of the Linux virtual network interface TUN/TAP driver leads to a lack of memory release after the effective lifespan of these functions has ended. Exploiting this vulnerability can allow an attacker to cause...

Libssh2 Packet Add DoS

The vulnerability of the libssh2packetadd function in the src/packet.c component of the SSH2 protocol implementation library Libssh2 involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

lpc32xx PWM Driver Heap Buffer Overflow DoS

The vulnerability of the lpc32xxpwmprobe function in the drivers/pwm/pwm-lpc32xx.c file of the PWM device driver for Linux operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

Karapace Kafka REST Authentication Bypass

The vulnerability of the Karapace interface for Kafka REST relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and gain read-write access to data...

container management system createDependentVolumesFromBackup function Heap Buffer Overflow DoS

The vulnerability of the createDependentVolumesFromBackup function in the internal/server/storage/backend.go file of the container management system and the virtual machine manager Incus is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigg...

TOTOLink A3600R Router Arbitrary Command Execution

The vulnerability of the setNoticeCfg function in the TOTOLink A3600R router’s microprogramming software relates to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK A3300R SetVpnPassCfg Command Execution

The vulnerability of the setVpnPassCfg function in TOTOLINK A3300R router microprogramming software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

DHCP Server Windows Code Execution

The vulnerability of DHCP servers for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

vm2 Promise.prototype.finally() Code Execution

The vulnerability of the Promise.prototype.finally function in the vm2 package manager of NPM is related to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

NPM vm2 Code Execution

The vulnerability of the NPM package manager’s vm2 library is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

vm2 EventEmitter Prototype Code Execution

The vulnerability of the EventEmitter.prototype.emit method in the vm2 library of the NPM package manager is related to insufficient resource control with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Tesseract OCR Classify ReadIntTemplates Heap Buffer Overflow DoS

The vulnerability of the GenericVector::read function in the src/ccutil/genericvector.h file of the Tesseract OCR system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tesseract OCR GenericVector read code execution

The vulnerability of the GenericVector::read function in the src/ccutil/genericvector.h file of the Tesseract OCR system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

DHCP Server Windows Code Execution

The vulnerability of DHCP servers for Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Internet Connection Sharing Windows Code Execution

The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Microsoft Office Memory Execution Arbitrary Code

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NFS ONCRPC XDR Driver Code Execution

The vulnerability of services for the NFS ONCRPC XDR driver on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Skype for Business Instant Messaging Spoofing

The vulnerability of the Skype for Business Server’s instant messaging program is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out spoofing attacks remotely...

MariaDB SST Command Execution

The vulnerability of the State Snapshot Transfer SST mechanism of the MariaDB database management system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

MariaDB wsrep_sst_receive_address Command Execution

The vulnerability of the wsrepsstreceiveaddress and wsrepsstdonor parameters in the sql/wsrepsst.cc file of the MariaDB database management system is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability may allow an attacker operating remotely...

OpenSSL invoke_passwd_cb() function Heap Buffer Overflow

The vulnerability of the invokepasswdcb function in the openssl/src/util.rs module of the OpenSSL library is related to the execution of operations outside the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...

Authlib OAuth CSRF

The vulnerability of the OAuth authentication component for web applications based on the Starlette library, provided by the Authlib library for OAuth and OpenID Connect servers, is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to...

FortiSandbox Threat Detection Data Cleaning Unauthorized Access Command Execution

The vulnerability of the FortiSandbox threat detection and mitigation system is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information or execu...

Fortinet Privileged Access Agent Authentication Bypass

The vulnerability of the Fortinet Privileged Access Agent for Chrome is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

OpenSSL src/ssl/callbacks.rs RCE

The vulnerability of the functions rawclientpsk, rawserverpsk, rawcookiegenerate, and rawstatelesscookiegenerate in the OpenSSL library’s src/ssl/callbacks.rs module is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to...

golang-x-image DoS

The vulnerability of the golang-x-image package, a programming language, is related to unlimited resource distribution. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Incus uploadDir S3 Arbitrary Command Execution

The vulnerability of the uploadDir function in the internal/server/storage/s3/local/multipart.go file of the container management system and the virtual machine manager Incus is related to improper external manipulation of the file name or path. Exploiting this vulnerability allows a remote...

container management system instancesPost disclosure

The vulnerability of the instancesPost function in the cmd/incusd/instancespost.go file of the container management system and the Incus virtual machine manager is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Amphion VPU video encoder driver Buffer Overflow DoS

The vulnerability of the functions vencgparm and vencsparm in the driver/media/platform/amphion/venc.c file of the Amphion VPU video encoder driver for Linux operating systems is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

D-Link DIR-882 CGI Binary Buffer Overflow Disclosure

The vulnerability in the main function of the /HNAP1/dllog.cgi file of the CGI Binary component of the D-Link DIR-882 wireless router software is related to insufficient protection for sensitive data. Exploiting this vulnerability could allow an attacker to disclose confidential information...

TOTOLINK A3300R Router Command Execution

The vulnerability of the setUPnPCfg function in TOTOLINK A3300R router microprogramming systems is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Microsoft XPS Document Writer Code Execution

The vulnerability of the Microsoft XPS Document Writer MXDW driver on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

vm2 NPM setDefaultCACertificates Code Execution

The vulnerability of the tls.setDefaultCACertificates function in the vm2 package manager’s NPM library is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NPM vm2 Code Execution

The vulnerability of the NPM packet manager’s library vm2 is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

vm2 require.external Code Execution

The vulnerability of the require.external component in the vm2 package manager NPM is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

vm2 Buffer Overflow DoS

The vulnerabilities of the Buffer.from and Buffer.concat functions in the vm2 library from the NPM package manager are related to information disclosure. Exploiting these vulnerabilities could allow an attacker to gain unauthorized access to protected information and cause service failures...

Microsoft Office Memory Execution Arbitrary Code

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...